pursuant to Regulation (EU) 2016/679 (GDPR) and Law no. 190/2018 Document intended for Patients of the melio.med platform
1. Who processes your data?
Your personal data is processed by:
| Controller | ONCOSTOP S.R.L. — melio.med platform |
| Tax ID (CUI) | 52443272 |
| Trade Register No. | J2025066671009 |
| Registered office | Bucharest, Sector 3, Strada Murgeni, No. 3, Room 1, Bl. L29, Staircase B, Floor 3, Apt. 74 |
| Legal representative | Stefania Carmen CHITU |
| GDPR contact | gdpr@melio.med |
| Website | https://www.melio.med |
2. What data do we process?
Identification data
- First name, last name, date of birth, gender
- Personal Identification Number (CNP) — for issuing medical documents
- Home/residence address
- Email address and phone number
Medical data (special categories — Art. 9 GDPR)
- Symptoms, diagnoses, prescribed treatments
- Medical history and antecedents
- Test and investigation results
- Clinically relevant biometric data
- Teleconsultation session recordings (with your explicit consent)
Financial data
- Data necessary for payment processing (through PayU — we do not store card data)
- Transaction and invoice history
3. Why do we process your data?
| Purpose | Legal basis | Legal provision |
|---|---|---|
| Teleconsultation and medical care | Contract + Medical purpose | Art. 6(1)b + Art. 9(2)h GDPR |
| Appointments and doctors marketplace | Contract / Consent | Art. 6(1)b GDPR |
| Patient telemonitoring | Explicit consent | Art. 9(2)a GDPR |
| Payment processing | Contract + Legal obligation | Art. 6(1)b+c GDPR |
| Medical document archiving | Legal obligation | Art. 6(1)c + MH Order 1226/2012 |
| Platform improvement | Legitimate interest | Art. 6(1)f GDPR |
4. How long do we keep the data?
- Medical files and documents: minimum 10 years (Ministry of Health Order no. 1226/2012)
- User account data: duration of the contract + 5 years
- Invoices and tax documents: 10 years (Tax Code)
- Video teleconsultation recordings: 90 days
- Browsing data / logs: 12 months
5. Your rights under the GDPR
Pursuant to Art. 15-22 of the GDPR and Law no. 190/2018, you have the following rights:
- Right of ACCESS — to request a copy of the processed data
- Right to RECTIFICATION — to correct inaccurate data
- Right to ERASURE — under the conditions of the law (except for legal medical archiving obligations)
- Right to RESTRICTION of processing
- Right to DATA PORTABILITY — in a structured, machine-readable format
- Right to OBJECT — to processing based on legitimate interest
- Right NOT to be subject to AUTOMATED decisions / profiling
- Right to WITHDRAW consent at any time, without affecting the lawfulness of prior processing
You can exercise these rights by contacting us at: gdpr@melio.med
You also have the right to file a complaint with the ANSPDCP: www.dataprotection.ro, anspdcp@dataprotection.ro
6. Explicit Consent — Medical Data
CONSENT DECLARATION
By checking the consent box and using the melio.med platform, I express my FREE, SPECIFIC, INFORMED, and UNAMBIGUOUS consent pursuant to Art. 9(2)(a) of the GDPR, for the processing of my health data by ONCOSTOP S.R.L., for the purposes described in this Information Notice.
This Information Notice is permanently available at: https://www.melio.med/nota-de-informare-gdpr
ONCOSTOP S.R.L. | Tax ID: 52443272 | www.melio.med